Which of the following is NOT a resource of the National Vulnerability Database (NVD)?

• A. LDAP
• B. CPE
• C. CVE
• D. OVAL

Answer: (A)

Understanding what resources NVD provides helps you see why LDAP isn’t part of it. The National Vulnerability Database offers data resources that describe vulnerabilities and their impact in standardized, machine-readable forms. These include CVE, which are the vulnerability identifiers; CPE, which provides standardized names for products and platforms; CVSS, which scores and communicates severity; and OVAL, which provides a language and definitions for describing vulnerabilities in a structured way.

LDAP, the Lightweight Directory Access Protocol, is a directory service protocol used to access and manage distributed directory information. It’s not a data resource or feed in NVD, so it doesn’t represent a vulnerability item, a product name, a severity score, or an assessment definition. That mismatch is why LDAP isn’t considered a resource of the NVD.